connecting to a data logger over an IP connection using the web interface. TLS does not affect
PakBus communications.
Example server application instructions include:
l
HTTPS server
l
DNP() using the optional DNPTLS parameter
Example client application instructions include:
l
HTTPGet(), HTTPPut() and HTTPPost()
l
EmailRelay()
l
EmailSend() and EmailRecv()
l
FTPClient()
l
MQTTConnect()
l
MQTTPublishTable()
l
MQTTPublishConstTable()
CSI Web Server can also use TLS. See Applying keys and certificates to CSI Web Server(p. 151) for
more information.
NOTE:
For enhanced security, TLS settings are only shown in Device Configuration Utility when using
a direct USB connection, or an IP connection using PakBus Encryption.
Use the following steps to configure TLS:
1. Use the Device Configuration Utility to enable HTTPS and disable HTTP. See Deployment >
Network Services tab.
2. Use the Device Configuration Utility to enable and set up TLS. See Deployment >
Datalogger > TLS tab.
a. Increase the number of Max TLS Server Connections to greater than zero. Each additional
connection uses about 20KB of memory. For general use, such as publishing web pages,
use a minimum of five connections. Add more if multiple users may access the hosted
web pages at the same time. See Web interface(p. 157)
b. Use Set Private Key and Set Certificate to upload files in .PEM format. These can either be
self-signed or issued from a trusted 3rd party organization. See Obtaining certificate and
private key(p. 149) for more information.
o
Maximum key file size: 4KB public, 4KB private
Review the Will send file path message to ensure you have the correct files.
20. Installation148